Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I can't seem to find a good, practical way to encrypt documents on a shared drive...

This is a samba share on centos using ADS auth. The primary doc format will be PDF.

Is there a good on-thy-fly encryption/decription scheme I can't find? Things like TC are great and all, but a couple of issue with a full-disk soluton:

  • It requires that someone (or some script) unlock and lock the drive at the beginning and end of each day;

  • While unlocked it sits there on the LAN un-protected (aside from ADS authentication to access the drive);

I understand the PDF has some built-in security/crypto features, but the volume of documents will make the usage of them wholly inefficient.

How do people deal with storing data locally? Is the focus generally more on perimeter security?

share|improve this question
How do you expect the encryption to work? Password per document? Different users with different passwords able to access the doc? Something else? – symcbean Jan 19 '12 at 14:57
Sorry--should have made that clear.. The users are already authenticating two other times (ADS and ssl) so utilizing either of those somehow would be best. Per-document wouldn't work. Transparent would be best. – stormdrain Jan 19 '12 at 15:01
up vote 2 down vote accepted

This isn't really an answer to your exact problem, more of an alternative strategy which I have used in the past for accessing sensitive data. I set up a VM, and locally store the documents. Locally encrypting stuff is much easier. Then, anyone wishing to access the data will remotely connect to the running VM.

There are many flavours to this model too:

  • multiple or single accounts
  • encrypted block device / encrypted files
  • public network / private network / isolated vpn

Generally it has worked pretty well, and circumvents a lot of technical headache at the cost of increased group organization.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.